{"id":"CVE-2016-10243","aliases":["DEBIAN-CVE-2016-10243","DLA-847-1","DSA-3803-1","EUVD-2016-1428","GHSA-7674-jxfw-vhf5","MGASA-2017-0127","SUSE-SU-2024:1203-1","UBUNTU-CVE-2016-10243","USN-3401-1","openSUSE-SU-2024:11431-1","openSUSE-SU-2024:11433-1","openSUSE-SU-2024:11434-1","openSUSE-SU-2024:11435-1","openSUSE-SU-2024:11436-1","openSUSE-SU-2024:11437-1","openSUSE-SU-2024:11438-1","openSUSE-SU-2024:11439-1","openSUSE-SU-2024:11440-1","openSUSE-SU-2024:11441-1","openSUSE-SU-2024:11442-1","openSUSE-SU-2024:11443-1","openSUSE-SU-2024:11444-1","openSUSE-SU-2024:11445-1","openSUSE-SU-2024:11446-1","openSUSE-SU-2024:11447-1","openSUSE-SU-2024:11448-1","openSUSE-SU-2024:11449-1","openSUSE-SU-2024:11450-1","openSUSE-SU-2024:11451-1","openSUSE-SU-2024:11452-1","openSUSE-SU-2024:11453-1","openSUSE-SU-2024:11454-1","openSUSE-SU-2024:11455-1","openSUSE-SU-2024:11456-1","openSUSE-SU-2024:11457-1","openSUSE-SU-2024:11458-1"],"status":"published","title":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost...","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07146,"percentile":0.94312,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2017-03-07T00:00:00Z","modified":"2026-09-22T07:00:09Z","fixes":[{"ecosystem":"Debian:12","package":"texlive-base","fixed_in":["2016.20161130-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"texlive-base","fixed_in":["2016.20161130-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"texlive-base","fixed_in":["2016.20161130-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"texlive-bin","fixed_in":["2019.20190605.51237-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"texlive-bin","fixed_in":["2019.20190605.51237-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"texlive-bin","fixed_in":["2019.20190605.51237-2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"texlive-base","fixed_in":["2012.20120611-5+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"texlive-base","fixed_in":["2014.20141024-2+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"texlive","fixed_in":["20130530-21.1.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"texlive-kastrup","fixed_in":["2013.84.svn15878-21.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"texlive-koma-script","fixed_in":["2013.84.3.11bsvn29774-21.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"texlive-kpathsea","fixed_in":["2013.84.svn30218-21.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"texlive-base","fixed_in":["2013.20140215-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"texlive-base","fixed_in":["2015.20160320-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-a","fixed_in":["2021.186.3.0_beta3svn33894-47.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-b","fixed_in":["2021.186.svn19440-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-c","fixed_in":["2021.186.svn15878-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-d","fixed_in":["2021.186.2.1bsvn15878-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-e","fixed_in":["2021.186.1.5svn55387-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-f","fixed_in":["2021.186.1.5.7svn58590-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-g","fixed_in":["2021.186.1.0svn54080-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-h","fixed_in":["2021.186.1.0svn18115-46.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-i","fixed_in":["2021.186.2.0bsvn56782-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-j","fixed_in":["2021.186.1.6.0svn54732-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-k","fixed_in":["2021.186.1.0fsvn22255-46.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-l","fixed_in":["2021.186.1.2.2svn57773-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-m","fixed_in":["2021.186.0.0.5.6svn53248-48.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-n","fixed_in":["2021.187.svn55643-47.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-o","fixed_in":["2021.186.1.5svn15878-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-p","fixed_in":["2021.186.1.01svn41996-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-q","fixed_in":["2021.186.0.0.1svn45601-47.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-r","fixed_in":["2021.186.0.0.3.1svn55214-44.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-s","fixed_in":["2021.186.0.0.3bsvn15878-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-t","fixed_in":["2021.186.0.0.1svn15878-46.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-u","fixed_in":["2021.186.1.2asvn15878-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-v","fixed_in":["2021.186.0.0.1svn34495-50.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-w","fixed_in":["2021.186.1.2svn54512-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-x","fixed_in":["2021.186.1.3svn40772-45.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-y","fixed_in":["2021.186.1.1svn48423-46.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-z","fixed_in":["2021.186.17.7svn55862-45.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.20161130-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.20161130-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.20161130-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.20190605.51237-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.20190605.51237-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.20190605.51237-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2012.20120611-5+deb7u1"}]}],"versions":["2012.20120611-5"]},{"source":"osv","ecosystem":"Debian:8","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.20141024-2+deb8u1"}]}],"versions":["2014.20141024-2"]},{"source":"osv","ecosystem":"Mageia:5","package":"texlive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20130530-21.1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"texlive-kastrup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.84.svn15878-21.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"texlive-koma-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.84.3.11bsvn29774-21.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"texlive-kpathsea","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.84.svn30218-21.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.20140215-1ubuntu0.1"}]}],"versions":["2013.20130722-1","2013.20131010-2","2013.20131112-1","2013.20131219-1","2013.20140123-1","2013.20140215-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.20160320-1ubuntu0.1"}]}],"versions":["2015.20150625-1ubuntu1","2015.20151116-1ubuntu1","2015.20151225-1","2015.20160117-1","2015.20160215-1","2015.20160223-1","2015.20160320-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.20140215-1ubuntu0.1"}]}],"versions":["2013.20130722-1","2013.20131010-2","2013.20131112-1","2013.20131219-1","2013.20140123-1","2013.20140215-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.20160320-1ubuntu0.1"}]}],"versions":["2015.20150625-1ubuntu1","2015.20151116-1ubuntu1","2015.20151225-1","2015.20160117-1","2015.20160215-1","2015.20160223-1","2015.20160320-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.20210325.svn34398-76.3"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-a","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.3.0_beta3svn33894-47.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.svn19440-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.svn15878-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.2.1bsvn15878-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.5svn55387-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-f","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.5.7svn58590-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.0svn54080-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-h","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.0svn18115-46.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-i","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.2.0bsvn56782-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.6.0svn54732-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.0fsvn22255-46.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-l","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.2.2svn57773-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.0.0.5.6svn53248-48.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.187.svn55643-47.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.5svn15878-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-p","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.01svn41996-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-q","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.0.0.1svn45601-47.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-r","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.0.0.3.1svn55214-44.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-s","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.0.0.3bsvn15878-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-t","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.0.0.1svn15878-46.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-u","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.2asvn15878-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-v","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.0.0.1svn34495-50.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-w","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.2svn54512-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.3svn40772-45.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-y","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.1.1svn48423-46.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive-specs-z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.186.17.7svn55862-45.3"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"tug","product":"tex_live"}],"references":[{"url":"https://scumjr.github.io/2016/11/28/pwning-coworkers-thanks-to-latex/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VL6PUKPWEXYIPIAZRIX5ZLQWCSALVLFP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.tug.org/svn/texlive?view=revision\u0026revision=42605","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/201709-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3803","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/03/05/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/96593","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B7CNJ4HKX7X6V7VMN3UCU7KPY6IX4XRB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10243"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B7CNJ4HKX7X6V7VMN3UCU7KPY6IX4XRB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VL6PUKPWEXYIPIAZRIX5ZLQWCSALVLFP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B7CNJ4HKX7X6V7VMN3UCU7KPY6IX4XRB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VL6PUKPWEXYIPIAZRIX5ZLQWCSALVLFP"},{"url":"https://scumjr.github.io/2016/11/28/pwning-coworkers-thanks-to-latex"},{"url":"https://github.com/advisories/GHSA-7674-jxfw-vhf5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-10243","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0127.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20401","tags":["report"]},{"url":"https://www.debian.org/security/2017/dsa-3803","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241203-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1028271","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10243","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-10243","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3401-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10243","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8016","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-10243","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","status":"published","published":"2017-05-02T14:00:00Z","modified":"2024-08-06T03:14:42.836Z","updated_at":"2026-11-02T14:33:31.764001Z"}],"euvd":[{"id":"EUVD-2016-1428","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","status":"published","published":"2017-05-02T14:00:00Z","modified":"2024-08-06T03:14:42Z","updated_at":"2026-11-03T02:22:24.206227Z"}],"ghsa":[{"id":"GHSA-7674-jxfw-vhf5","title":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost...","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","status":"published","published":"2022-05-17T00:53:10Z","modified":"2025-04-20T03:38:10Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:45.743786Z"}],"nvd":[{"id":"CVE-2016-10243","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","status":"published","published":"2017-05-02T14:59:00.283Z","modified":"2026-06-17T00:39:21.12Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:37.619685Z"}],"osv":[{"id":"CVE-2016-10243","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","status":"published","published":"2017-05-02T14:59:00.283Z","modified":"2026-04-16T06:16:22.331520891Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-10243","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","status":"published","published":"2017-05-02T14:59:00.283Z","modified":"2026-09-22T07:00:09.893955252Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"UBUNTU-CVE-2016-10243","description":"TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","status":"published","published":"2017-05-02T00:00:00Z","modified":"2026-02-04T03:14:49.069959Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"DLA-847-1","title":"texlive-base - security update","status":"published","published":"2017-03-07T00:00:00Z","modified":"2026-03-09T02:09:40.962362Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3803-1","title":"texlive-base - security update","status":"published","published":"2017-03-08T00:00:00Z","modified":"2026-03-09T01:19:37.728958Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0127","title":"Updated texlive packages fix security vulnerability","description":"It was discovered that texlive whitelists mpost as an external program\nto be run from within the TeX source code (called \\write18). Since\nmpost allows to specify other programs to be run, an attacker can take\nadvantage of this flaw for arbitrary code execution when compiling a TeX\ndocument (CVE-2016-10243).\n","status":"published","published":"2017-05-03T09:48:17Z","modified":"2026-04-16T06:23:50.676578192Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:11431-1","title":"libkpathsea6-6.3.3-76.3 on GA media","description":"These are all security issues fixed in the libkpathsea6-6.3.3-76.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:14.082976Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11433-1","title":"texlive-12many-2021.186.0.0.3svn15878-47.2 on GA media","description":"These are all security issues fixed in the texlive-12many-2021.186.0.0.3svn15878-47.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:14.145201Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11434-1","title":"texlive-around-the-bend-2021.186.svn15878-46.2 on GA media","description":"These are all security issues fixed in the texlive-around-the-bend-2021.186.svn15878-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:45.303825Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11435-1","title":"texlive-bbding-2021.186.1.01svn17186-46.2 on GA media","description":"These are all security issues fixed in the texlive-bbding-2021.186.1.01svn17186-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:14.269695Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11436-1","title":"texlive-biolett-bst-2021.186.svn42217-45.2 on GA media","description":"These are all security issues fixed in the texlive-biolett-bst-2021.186.svn42217-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:47:34.831727Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11437-1","title":"texlive-chapterfolder-2021.186.2.0.1svn15878-46.2 on GA media","description":"These are all security issues fixed in the texlive-chapterfolder-2021.186.2.0.1svn15878-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:22:06.716016Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11438-1","title":"texlive-confproc-2021.186.0.0.8svn29349-46.2 on GA media","description":"These are all security issues fixed in the texlive-confproc-2021.186.0.0.8svn29349-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:26:23.048573Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11439-1","title":"texlive-datetime2-basque-2021.186.1.2asvn47064-45.2 on GA media","description":"These are all security issues fixed in the texlive-datetime2-basque-2021.186.1.2asvn47064-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:37:15.041851Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11440-1","title":"texlive-dvdcoll-2021.186.1.1asvn15878-46.3 on GA media","description":"These are all security issues fixed in the texlive-dvdcoll-2021.186.1.1asvn15878-46.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:21:36.845297Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11441-1","title":"texlive-eskd-2021.186.svn15878-45.2 on GA media","description":"These are all security issues fixed in the texlive-eskd-2021.186.svn15878-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:28.420433Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11442-1","title":"texlive-float-2021.186.1.3dsvn15878-45.2 on GA media","description":"These are all security issues fixed in the texlive-float-2021.186.1.3dsvn15878-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:30:16.201867Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11443-1","title":"texlive-gitfile-info-2021.186.0.0.5svn51928-46.3 on GA media","description":"These are all security issues fixed in the texlive-gitfile-info-2021.186.0.0.5svn51928-46.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:14.764619Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11444-1","title":"texlive-hrlatex-2021.186.0.0.23svn18020-45.2 on GA media","description":"These are all security issues fixed in the texlive-hrlatex-2021.186.0.0.23svn18020-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:17:49.865357Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11445-1","title":"texlive-ionumbers-2021.186.0.0.3.3svn33457-48.2 on GA media","description":"These are all security issues fixed in the texlive-ionumbers-2021.186.0.0.3.3svn33457-48.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:23:57.839407Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11446-1","title":"texlive-latex-web-companion-2021.187.svn29349-47.2 on GA media","description":"These are all security issues fixed in the texlive-latex-web-companion-2021.187.svn29349-47.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:03.515922Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11447-1","title":"texlive-lshort-slovak-2021.186.svn15878-45.2 on GA media","description":"These are all security issues fixed in the texlive-lshort-slovak-2021.186.svn15878-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:55:34.681369Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11448-1","title":"texlive-menu-2021.186.0.0.994svn15878-46.2 on GA media","description":"These are all security issues fixed in the texlive-menu-2021.186.0.0.994svn15878-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:57:22.404581Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11449-1","title":"texlive-na-box-2021.186.1.0svn45130-47.3 on GA media","description":"These are all security issues fixed in the texlive-na-box-2021.186.1.0svn45130-47.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:48.561015Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11450-1","title":"texlive-overlays-2021.186.2.12svn57866-44.2 on GA media","description":"These are all security issues fixed in the texlive-overlays-2021.186.2.12svn57866-44.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:15.184655Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11451-1","title":"texlive-plari-2021.186.svn15878-45.2 on GA media","description":"These are all security issues fixed in the texlive-plari-2021.186.svn15878-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:53:50.117186Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11452-1","title":"texlive-pst-pdf-2021.186.1.2fsvn56622-46.3 on GA media","description":"These are all security issues fixed in the texlive-pst-pdf-2021.186.1.2fsvn56622-46.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:06.284915Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11453-1","title":"texlive-robustindex-2021.186.svn49877-46.2 on GA media","description":"These are all security issues fixed in the texlive-robustindex-2021.186.svn49877-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:15.368935Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11454-1","title":"texlive-simplified-latex-2021.186.svn20620-50.3 on GA media","description":"These are all security issues fixed in the texlive-simplified-latex-2021.186.svn20620-50.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:47:59.424621Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11455-1","title":"texlive-scripts-2021.186.svn58742-46.2 on GA media","description":"These are all security issues fixed in the texlive-scripts-2021.186.svn58742-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:04:44.048313Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11456-1","title":"texlive-tikz-dimline-2021.186.1.0svn35805-45.2 on GA media","description":"These are all security issues fixed in the texlive-tikz-dimline-2021.186.1.0svn35805-45.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:55.451006Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11457-1","title":"texlive-ucharcat-2021.186.0.0.03svn38907-46.2 on GA media","description":"These are all security issues fixed in the texlive-ucharcat-2021.186.0.0.03svn38907-46.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:46:12.873119Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11458-1","title":"texlive-wrapfig-2021.186.3.6svn22048-45.3 on GA media","description":"These are all security issues fixed in the texlive-wrapfig-2021.186.3.6svn22048-45.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:57:24.458581Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2024:1203-1","title":"Security update for texlive-specs-k","description":"This update for texlive-specs-k fixes the following issues:\n\n  CVE-2016-10243: Fixed arbitrary code execution via mpost during TeX document compilation (bsc#1028271)\n","status":"published","published":"2024-04-11T09:03:28Z","modified":"2025-05-02T04:29:40.379176Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"USN-3401-1","title":"texlive-base vulnerability","description":"It was discovered that TeX Live incorrectly handled certain\nsystem commands. If a user were tricked into processing a\nspecially crafted TeX file, a remote attacker could execute\narbitrary code.\n","status":"published","published":"2017-08-22T13:10:33Z","modified":"2026-02-10T04:41:11Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}